Ubiquiti UniFi Enterprise Fortress Gateway is a high-performance 25G cloud gateway designed for large-scale enterprise networks. It supports over 500 UniFi devices and 5,000+ clients, delivering fast, secure, and scalable connectivity.
-
Supports 500+ UniFi devices and 5,000+ clients
-
25 Gbps routing performance with 12.5 Gbps IDS/IPS throughput
-
Built-in SSL/TLS decryption with NeXT AI Inspection for deep packet inspection
-
Runs UniFi Network for full-stack management with no license fees
-
Application-aware firewall for traffic control by app, domain, or IP
-
Shadow Mode with VRRP for High Availability and automatic failover
-
Dual hot-swappable 150W power supplies for power redundancy
-
(2) 25G SFP28, (2) 10G SFP+, and (2) 2.5G RJ45 ports (any two can be WAN)
-
1.3" touchscreen for system monitoring and alerts
-
Multi-WAN support with load balancing and failover modes
-
Advanced VPN options including WireGuard, Teleport, OpenVPN, and IPsec
-
Built for maximum uptime and security in demanding enterprise environments
-
Deal registration required for purchase
Specifications
Mechanical
Dimensions: 442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8")
Weight: 6.5 kg (14.3 lb)
Enclosure material: Aluminium CNC, SGCC steel
Hardware
Processor: 18-core ARM v8.2 at 2 GHz
System memory: 16 GB DDR4 DIMM
Management interface: Ethernet, Bluetooth
Networking interface: (2) 25G SFP28 ports, (2) 10G SFP+ ports, (2) 2.5 GbE RJ45 ports (Map any 2 to WAN)
Power method: (1) Universal AC input, 100—240V AC, 7A Max., 50/60 Hz
Power supply: (2) Hot-swappable 150W CRPS
Supported voltage range: 100–240V AC
Max. power consumption: 82W
ESD/EMP protection: Air: ± 8kV, contact: ± 4kV
LCM display: (1) 1.3" touchscreen
Button: Factory reset
Operating temperature: 0 to 40° C (22 to 104° F)
Operating humidity: 5 to 95% noncondensing
Certifications: CE, FCC, IC
Gateway Features
Performance
-
Redundant WAN with failover and load balancing
-
WiFi QoS with UniFi APs
-
Application, domain, and country-based QoS
-
Application and device type identification
-
Additional internet failover with LTE Backup
-
Internet quality and outage reporting
Security
-
Application-aware firewall rules
-
Signature-based IPS/IDS threat detection
-
Content, country, domain, and ad filtering
-
VLAN/subnet-based traffic segmentation
-
Full stateful firewall
Networking
-
License-free SD-WAN
-
WireGuard, L2TP, and OpenVPN server
-
OpenVPN client
-
OpenVPN and IPsec site-to-site VPN
-
One-click Teleport and Identity VPN
-
Policy-based WAN and VPN routing
-
DHCP relay
-
Customisable DHCP server
-
IGMP proxy
-
IPv6 ISP support
Capacity
-
UniFi devices: 500+
-
Client devices: 5,000+
-
Concurrent sessions: 1 million
-
New sessions per second: 71,000
-
SSL/TLS inspection concurrent sessions: 10,000 (limit to 5,000 recommended for high-traffic networks)
-
IDS/IPS signatures: 80,000+ (with Enhanced Threat Updates)
Routing Throughput
-
Firewall: 23.5 Gbps
-
IDS/IPS: 12.5 Gbps
VPN Server Single User Throughput
-
UniFi Identity: 1.2 Gbps
-
Teleport: 1.2 Gbps
-
WireGuard: 1.2 Gbps
-
OpenVPN: 210 Mbps
-
L2TP: 280 Mbps
Site-to-Site VPN Single Tunnel Throughput
-
Site Magic: 1.1 Gbps
-
OpenVPN: 120 Mbps
-
IPsec: 580 Mbps
VPN Client Single Tunnel Throughput
-
WireGuard: 980 Mbps
-
OpenVPN: 180 Mbps
LEDs
-
Ethernet: White (Link/activity)
-
SFP+: White (Link/activity)
-
CRPS: Off (No AC power), Steady white (AC power active), Flashing white (AC power present), Steady red (AC power failure), Flashing red (Warning)
